← Back to Nutanix AOS 5.20.x Application Security Technical Implementation Guide

V-254106

CAT III (Low)

Nutanix AOS must be configured to synchronize internal information system clocks using redundant authoritative time sources.

Rule ID

SV-254106r981685_rule

STIG

Nutanix AOS 5.20.x Application Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000159 CCI-001891 CCI-002046

Discussion

Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events. Synchronization of system clocks is needed in order to correctly correlate the timing of events that occur across multiple systems. To meet this requirement, the organization will define an authoritative time source and have each system compare its internal clock at least every 24 hours. Satisfies: SRG-APP-000371-AS-000077, SRG-APP-000372-AS-000212, SRG-APP-000116-AS-000076

Check Content

Confirm Nutanix AOS Prism Elements is configured to use redundant NTP sources.

1. Log in to Prism Element.
2. Click on the gear icon in the upper right.
3. Navigate to the NTP Servers section.
4. Ensure external NTP servers have been configured.

If external NTP sources are not configured, this is a finding.

Fix Text

Configure Nutanix AOS Prism Elements to use redundant authoritative NTP time sources.

1. Log in to Prism Element.
2. Click on the gear icon in the upper right.
3. Navigate to the NTP Servers section.
4. Configure two authoritative NTP servers.